
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
File: 25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa (raw, json)
Hash identifier: CgZKZqVrG4gACh8GK8jk6o+4ReJtUcrqA+RzqLOlVD4=
Subject key identifier: C1:07:C0:04:F0:AA:BE:2B:6B:20:24:8F:A7:3C:2D:70:84:33:65:B9
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24E12C680B38B009B86C3280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.23.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e1:2c:68:0b:38:b0:09:b8:6c:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=0eda4465-a056-4067-9379-98717f7edfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:c8:bd:80:36:96:68:6b:7c:f3:6e:bb:cd:
cb:40:4e:a1:40:95:ec:2a:5b:12:12:cf:d7:d4:59:
58:2e:72:8e:24:a4:5d:ca:4f:76:c5:c7:c4:a0:db:
8c:13:28:e5:9b:ad:f1:85:7d:38:d9:dc:f1:85:f7:
e9:c8:62:be:0d:d1:e8:ab:cc:6c:b1:a9:e0:02:18:
d2:51:01:60:90:ee:84:9b:2e:fa:33:f1:c8:5d:9b:
bf:d1:f9:0d:2f:90:ec:87:e0:21:58:92:14:33:ab:
13:2e:a3:66:45:71:dd:c8:80:2a:a0:8a:a7:f7:84:
0a:6b:d6:4a:af:66:81:f4:22:f0:27:d9:5f:ec:80:
2d:32:cb:c7:8b:5c:b3:70:d6:6d:ef:d1:59:27:7d:
99:3f:0b:34:ef:1c:30:5f:8f:60:aa:eb:d7:23:e8:
45:87:92:6a:ac:6d:d5:16:99:60:97:6e:2d:dc:ed:
ae:de:01:93:0a:c2:17:f7:af:a2:e7:94:a6:eb:ca:
80:f9:f7:d5:5d:64:8a:7e:48:7a:99:25:4d:a8:de:
e0:14:d2:63:2b:9f:e1:6e:ef:b1:51:75:1d:14:34:
2c:37:f9:7c:a4:bd:cb:12:e5:1a:33:00:75:93:5f:
39:5c:2f:7f:71:d4:13:1a:21:d6:e6:8e:0e:2b:35:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:07:C0:04:F0:AA:BE:2B:6B:20:24:8F:A7:3C:2D:70:84:33:65:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:f6:59:ad:6e:ab:34:b3:e7:39:25:54:3f:59:29:7d:18:b5:
db:5f:6e:20:65:74:1e:f0:cd:9d:25:b1:cc:b3:58:9b:84:e5:
dd:fc:a5:2d:e4:f3:4a:b4:91:66:95:cd:3c:ad:bf:4c:fb:af:
1d:f2:8f:48:a9:e4:86:22:f8:d6:ad:26:a6:2d:b4:a6:12:f8:
87:4c:02:a0:12:de:c8:9c:1d:01:20:67:27:fa:25:76:a9:81:
0d:9b:6e:25:0f:0c:c7:78:92:c9:e4:e2:77:f0:ab:ca:4a:fe:
e5:aa:f2:06:05:50:03:76:ae:42:86:32:df:bf:78:8d:47:04:
a1:0b:d8:7c:68:15:39:6f:3c:5f:f9:f6:fd:6e:a2:f5:2e:de:
29:d3:61:44:0d:f7:e2:f6:53:8b:65:32:bc:56:2f:d9:ad:00:
85:23:91:0c:ea:cb:3f:c2:24:00:7b:41:ac:4b:74:2e:41:c8:
22:2e:6a:7b:25:5e:5d:0a:c3:46:7d:94:65:ee:82:bb:98:30:
fc:bf:70:1f:9a:68:a5:8d:a9:29:ee:b6:d6:60:6e:99:7b:dd:
67:ec:f7:99:9b:66:cd:2b:49:36:fb:cc:9d:0f:72:62:c5:f0:
53:6c:08:2a:95:11:90:5b:09:f7:40:e9:1d:ec:57:6f:9b:51:
f0:97:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:05 2026 by rpki-client